locked
Windows 7 BSoD trouble RRS feed

  • Question

  • Hey this is my first time posting here, I'm a pretty techy guy but this one has me stumped.

    I built my pc at the beginning of the year, and usually once a day it will blue screen or the screen will go navy blue with white streaks running across it. I believe its either one of or both of video cards (ati 5770s) or some defective ram. I have tried to look into the error as best I could but haven't found anything conclusive. I hope you guys can help me out, its driving me crazy.

    My pc specs are:

    Core i7 2.66ghz

    2 ati 5770s

    10gb of dominator ram (only 8gb shows up, but thats another problem that may or may not be related)

    3 hdd

    antec 850w psu

    asus p6t deluxe mobo

    thats about it

    and the error stuff that i get

    Problem signature:
      Problem Event Name:    BlueScreen
      OS Version:    6.1.7600.2.0.0.768.3
      Locale ID:    2057

    Additional information about the problem:
      BCCode:    4a
      BCP1:    0000000075552DD9
      BCP2:    0000000000000002
      BCP3:    0000000000000000
      BCP4:    FFFFF88003E2ECA0
      OS Version:    6_1_7600
      Service Pack:    0_0
      Product:    768_1

    Files that help describe the problem:
      C:\Windows\Minidump\111910-59139-01.dmp
      C:\Users\Pantheraleo\AppData\Local\Temp\WER-61963-0.sysdata.xml

    I've included both files in the link below

    http://cid-54e73d700c451c6f.office.live.com/self.aspx/.Public/dump.zip

    any help would be greatly appreciated.

     

    Panth.

     

    Friday, November 19, 2010 7:44 PM

Answers

  • Without more dumps to confirm, appears to be due to the ZoneAlarm firewall. You may want to see if there is an update for it, if not, the builtin firewall in Windows 7 is usually sufficient (and you can uninstall ZoneAlarm) and you can use Microsoft Security Essentials for antivirus.

    Doc on the error that occurred: http://msdn.microsoft.com/en-us/library/ff559001%28v=VS.85%29.aspx

    4: kd> !analyze -v
    *******************************************************************************
    *                                       *
    *            Bugcheck Analysis                  *
    *                                       *
    *******************************************************************************
    
    IRQL_GT_ZERO_AT_SYSTEM_SERVICE (4a)
    Returning to usermode from a system call at an IRQL > PASSIVE_LEVEL.
    Arguments:
    Arg1: 0000000075552dd9, Address of system function (system call routine)
    Arg2: 0000000000000002, Current IRQL
    Arg3: 0000000000000000, 0
    Arg4: fffff88003e2eca0, 0
    
    Debugging Details:
    ------------------
    
    
    PROCESS_NAME: vsmon.exe
    
    BUGCHECK_STR: RAISED_IRQL_FAULT
    
    FAULTING_IP: 
    +3733653136326662
    00000000`75552dd9 ??       ???
    
    CUSTOMER_CRASH_COUNT: 1
    
    DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
    
    CURRENT_IRQL: 2
    
    LAST_CONTROL_TRANSFER: from fffff80002e87b69 to fffff80002e88600
    
    STACK_TEXT: 
    fffff880`03e2ea68 fffff800`02e87b69 : 00000000`0000004a 00000000`75552dd9 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
    fffff880`03e2ea70 fffff800`02e87aa0 : fffff880`03e2eca0 fffffa80`089ca670 fffff880`03e2ebf8 00000000`00000000 : nt!KiBugCheckDispatch+0x69
    fffff880`03e2ebb0 00000000`75552dd9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x245
    00000000`0387f008 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x75552dd9
    
    
    STACK_COMMAND: kb
    
    FOLLOWUP_IP: 
    nt!KiSystemServiceExit+245
    fffff800`02e87aa0 4883ec50    sub   rsp,50h
    
    SYMBOL_STACK_INDEX: 2
    
    SYMBOL_NAME: nt!KiSystemServiceExit+245
    
    FOLLOWUP_NAME: MachineOwner
    
    MODULE_NAME: nt
    
    IMAGE_NAME: ntkrnlmp.exe
    
    DEBUG_FLR_IMAGE_TIMESTAMP: 4b88cfeb
    
    FAILURE_BUCKET_ID: X64_RAISED_IRQL_FAULT_vsmon.exe_nt!KiSystemServiceExit+245
    
    BUCKET_ID: X64_RAISED_IRQL_FAULT_vsmon.exe_nt!KiSystemServiceExit+245
    
    Followup: MachineOwner
    ---------
    

    -- Mike Burr
    • Proposed as answer by Andre.Ziegler Saturday, November 20, 2010 2:41 PM
    • Marked as answer by Miya Yao Tuesday, November 23, 2010 9:46 AM
    Friday, November 19, 2010 8:14 PM

All replies

  • Hi Ian,

    IRQL_GT_ZERO_AT_SYSTEM_SERVICE (4a) - Returning to usermode from a system call at an IRQL > PASSIVE_LEVEL.

    PROCESS_NAME:   ’¿    €úÿÿ

    BUGCHECK_STR:  RAISED_IRQL_FAULT


    Update all old driver:

    ASACPI.sys   Mon Mar 28 04:30:36 2005
    loopbe1.sys  Sun Jan 27 18:31:00 2008

    Because of the strange process nameyou should check the RAM.

    Please download memtest86+ [1], burn a new bootable CD (use a CD-RW if possible) from the ISO (download and use ImgBurn [2] to do this), reboot your PC and scan your RAM 4-5hours for errors. If it detects errors, replace the faulty RAM.

    André

    [1] http://www.memtest.org/download/4.10/memtest86+-4.10.iso.zip
    [2] http://www.imgburn.com/index.php?act=download


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Friday, November 19, 2010 8:08 PM
  • Without more dumps to confirm, appears to be due to the ZoneAlarm firewall. You may want to see if there is an update for it, if not, the builtin firewall in Windows 7 is usually sufficient (and you can uninstall ZoneAlarm) and you can use Microsoft Security Essentials for antivirus.

    Doc on the error that occurred: http://msdn.microsoft.com/en-us/library/ff559001%28v=VS.85%29.aspx

    4: kd> !analyze -v
    *******************************************************************************
    *                                       *
    *            Bugcheck Analysis                  *
    *                                       *
    *******************************************************************************
    
    IRQL_GT_ZERO_AT_SYSTEM_SERVICE (4a)
    Returning to usermode from a system call at an IRQL > PASSIVE_LEVEL.
    Arguments:
    Arg1: 0000000075552dd9, Address of system function (system call routine)
    Arg2: 0000000000000002, Current IRQL
    Arg3: 0000000000000000, 0
    Arg4: fffff88003e2eca0, 0
    
    Debugging Details:
    ------------------
    
    
    PROCESS_NAME: vsmon.exe
    
    BUGCHECK_STR: RAISED_IRQL_FAULT
    
    FAULTING_IP: 
    +3733653136326662
    00000000`75552dd9 ??       ???
    
    CUSTOMER_CRASH_COUNT: 1
    
    DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
    
    CURRENT_IRQL: 2
    
    LAST_CONTROL_TRANSFER: from fffff80002e87b69 to fffff80002e88600
    
    STACK_TEXT: 
    fffff880`03e2ea68 fffff800`02e87b69 : 00000000`0000004a 00000000`75552dd9 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
    fffff880`03e2ea70 fffff800`02e87aa0 : fffff880`03e2eca0 fffffa80`089ca670 fffff880`03e2ebf8 00000000`00000000 : nt!KiBugCheckDispatch+0x69
    fffff880`03e2ebb0 00000000`75552dd9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x245
    00000000`0387f008 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x75552dd9
    
    
    STACK_COMMAND: kb
    
    FOLLOWUP_IP: 
    nt!KiSystemServiceExit+245
    fffff800`02e87aa0 4883ec50    sub   rsp,50h
    
    SYMBOL_STACK_INDEX: 2
    
    SYMBOL_NAME: nt!KiSystemServiceExit+245
    
    FOLLOWUP_NAME: MachineOwner
    
    MODULE_NAME: nt
    
    IMAGE_NAME: ntkrnlmp.exe
    
    DEBUG_FLR_IMAGE_TIMESTAMP: 4b88cfeb
    
    FAILURE_BUCKET_ID: X64_RAISED_IRQL_FAULT_vsmon.exe_nt!KiSystemServiceExit+245
    
    BUCKET_ID: X64_RAISED_IRQL_FAULT_vsmon.exe_nt!KiSystemServiceExit+245
    
    Followup: MachineOwner
    ---------
    

    -- Mike Burr
    • Proposed as answer by Andre.Ziegler Saturday, November 20, 2010 2:41 PM
    • Marked as answer by Miya Yao Tuesday, November 23, 2010 9:46 AM
    Friday, November 19, 2010 8:14 PM
  • Thank you both for the quick responses. I am downloading an update for ZA now so I'll see how that goes. I'm not sure what Asacpi.sys belongs with but the loopbe.sys is for a programme I use so that I can track drums using the Guitar Hero drum kit as a midi drum kit. but the blue screens happened for a long time before I installed that programme. Mike I could probably zip all of my mini dumps if you'd like, might shed some light on whether ZA is the problem or not.

    Thanks Again.

    Friday, November 19, 2010 8:32 PM
  • Why do you get a proper processname? Do you use the 32 or 64bit WinDbg?

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Friday, November 19, 2010 8:49 PM
  • 64 bit
     

    -- Mike Burr
    Saturday, November 20, 2010 12:06 AM
  • 64 bit
     

    -- Mike Burr

    ok, thanks.

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Saturday, November 20, 2010 2:41 PM
  • Ok so, after uninstalling ZA and installing the very latest version of it, my pc hasn't bluescreened once over the past three days and touch wood, wont do it again for some time. Also after some fiddling around it turned out that the missing ram was due to a faulty stick.

    So thank you both for your help.

    Monday, November 22, 2010 11:52 PM